File: //lib/python3.6/site-packages/sos/report/plugins/__pycache__/gcp.cpython-36.pyc
3
ܓ�i6 � @ sV d dl Z d dlmZ d dlmZ d dlmZ d dlmZm Z m
Z
G dd� dee �Z dS )� N)�Any)�request)�URLError)�Plugin�IndependentPlugin� PluginOptc @ s� e Zd ZdZdZd Zedddd�gZdZd Z d
Z
d Z d d
� Z dd� Z
dd� Zed�dd�Zeed�dd�Zdd� Zeeed�dd ��Zd S ) �GCPzGoogle Cloud Platform�gcp�virtzkeep-piiFzyStop the plugin from removing PIIs like project name or organization ID from the metadata retrieved from Metadata server.)�defaultZdescz(/sys/devices/virtual/dmi/id/product_namezBhttp://metadata.google.internal/computeMetadata/v1/?recursive=truez[--REDACTED--]Nc C s@ y&t | jdd��}d|j� kS Q R X W n tk
r: dS X dS )zo
Checks if this plugin should be executed based on the presence of
GCE entry in sysfs.
zutf-8)�encodingzGoogle Compute EngineNF)�open� PRODUCT_PATH�read�OSError)�selfZsys_file� r �/usr/lib/python3.6/gcp.py�
check_enabled$ s
zGCP.check_enabledc C s$ | j ddgd� | jddgd� dS )z�
Collect the following info:
* `gcloud auth list` output
* Any google services output from journal
zgcloud auth listr )�tagszgoogle*)Zunitsr N)Zadd_cmd_outputZ add_journal)r r r r �setup/ s z GCP.setupc C s� | j ddgd��d}y,| j� | _| j� |jtj| jdd�� W n0 tk
rn } z|jt|�� W Y d d }~X nX W d Q R X d}| j j
j d�}|r�| j |� d S )Nz
metadata.jsonr )r � )�indentzAcurl -v --connect-timeout 10https://rhui.googlecloud.com/zone.txtzgoogle-rhui-client)
Zcollection_file� get_metadata�metadata�scrub_metadata�write�json�dumps� RuntimeError�strZpolicyZpackage_managerZall_pkgs_by_name_regexZcollect_cmd_output)r Zmfile�errZ curl_commandZ rhui_packager r r �collect< s
*z GCP.collect)�returnc C s | j | j�}tj|�S )zq
Retrieves metadata from the Metadata Server and transforms it into a
dictionary object.
)�_query_address�METADATA_QUERYr �loads)r Z
response_bodyr r r r O s zGCP.get_metadata)�urlr# c C s� y\t j|ddid�}t j|��6}|jdkrHtd|j� d�|j� j� ��|j� j� S Q R X W n4 tk
r� } ztdt|� �|�W Y dd}~X nX dS ) zf
Query the given url address with headers required by Google Metadata
Server.
zMetadata-FlavorZGoogle)Zheaders�� z2Failed to communicate with Metadata Server (code: z): Nz,Failed to communicate with Metadata Server: ) r ZRequestZurlopen�coder r �decoder r )r r' ZreqZresponser! r r r r$ W s
zGCP._query_addressc s� �j d�rdS �jd d � �jd d �t���ttd�� ����fdd� ���j��_�j�jd d d
� �j�jd d d � dS ) a"
Remove all PII information from metadata, unless a keep-pii option
is specified.
Note: PII information collected by this plugin, like
project number, account names etc. might be required by Google
Cloud Support for faster issue resolution.
zkeep-piiNZprojectZ projectIdZnumericProjectId)�datar# c s� t | t�r2d| kr �j| d< �fdd�| j� D �S t | t�rN�fdd�| D �S t | t�rp| j��j�j� �j�S t | t�r�| �kr��jS | S | S )N�tokenc s i | ]\}}� |�� |��qS r r )�.0�k�v)�scrubr r �
<dictcomp>� s z5GCP.scrub_metadata.<locals>.scrub.<locals>.<dictcomp>c s g | ] }� |��qS r r )r- �value)r0 r r �
<listcomp>� s z5GCP.scrub_metadata.<locals>.scrub.<locals>.<listcomp>)�
isinstance�dict�REDACTED�items�listr �replace�int)r+ )�
project_id�project_number�project_number_intr0 r r r r0 z s
z!GCP.scrub_metadata.<locals>.scrubZ
attributeszssh-keysZsshKeys)Z
get_optionr r r �safe_redact_key)r r )r; r< r= r0 r r r j s
zGCP.scrub_metadata)�dict_obj�keyc C s ||kr| j ||< dS )z
Redact keys N)r6 )�clsr? r@ r r r r> � s zGCP.safe_redact_key)r
)�__name__�
__module__� __qualname__Z
short_descZ plugin_nameZprofilesr Z option_listr r% r6 r r r r" r5 r r r$ r � classmethodr> r r r r r s"
'r ) r Ztypingr Zurllibr Z urllib.errorr Zsos.report.pluginsr r r r r r r r �<module> s